feat: MinIO integration — bucket finance, API service upload, Nginx routing

- 01-infra/nginx-configs: add MinIO /minio/ and /minio-console/ location blocks
  (port 9000 S3 API, port 9001 Console UI, path stripping via rewrite)
- 03-apiservice: integrate MinIO minio-python SDK for file upload
  - requirements.txt: add minio==7.2.11
  - app/core/config.py: add MINIO_ENDPOINT, ACCESS_KEY, SECRET_KEY, BUCKET_FINANCE, USE_SSL
  - app/services/minio_client.py: new — upload_file(), get_presigned_url(), delete_file()
  - app/routes/pages.py: replace local /data/uploads/ write with MinIO upload to finance bucket
  - docker-compose.yml: pass MinIO env vars to container
  - .env.example: document MinIO vars
- 07-minio/.env.example: add MINIO_SVC_ACCESS_KEY/SECRET_KEY section
- 07-minio/README.md: add Python minio SDK and Airflow DAG usage guide
- CLAUDE.md: project context (servers, SSH, paths, service distribution)
- document-obsidiant/: initial Obsidian docs for all services

03-apiservice/.env.example

@@ -47,3 +47,11 @@ KEYCLOAK_REDIRECT_URI=http://localhost:8040/apiservice/auth/callback
 AIRFLOW_API_URL=http://airflow-webserver:8080
 AIRFLOW_API_TOKEN=your-airflow-api-token
 AIRFLOW_DAG_ID_FINANCE=process_finance_excel
+
+# MinIO Object Storage (server 2: 192.168.100.9)
+# ใช้ service account sp_service_ac (ไม่ใช้ root credentials)
+MINIO_ENDPOINT=192.168.100.9:9000
+MINIO_SVC_ACCESS_KEY=sp_service_ac
+MINIO_SVC_SECRET_KEY=your-minio-service-account-secret
+MINIO_BUCKET_FINANCE=finance
+MINIO_USE_SSL=false